CVE-2016-3429

MEDIUM

Oracle Retail Xstore POS - Info Disclosure

Title source: llm

Description

Unspecified vulnerability in the Oracle Retail Xstore Point of Service component in Oracle Retail Applications 5.0, 5.5, 6.0, 6.5, 7.0, and 7.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Xstore Services.

Scores

CVSS v3 4.5
EPSS 0.0022
EPSS Percentile 44.1%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N

Classification

Status draft

Affected Products (6)

oracle/retail_xstore_point_of_service
oracle/retail_xstore_point_of_service
oracle/retail_xstore_point_of_service
oracle/retail_xstore_point_of_service
oracle/retail_xstore_point_of_service
oracle/retail_xstore_point_of_service

Timeline

Published Apr 21, 2016
Tracked Since Feb 18, 2026